The core is built in TypeScript/JavaScript around Fetch API and Web Crypto, with no runtime dependencies.

It’s meant to complement WAF and DDoS protection, not replace them.

I’m sharing it open source in case it’s useful to others. Technical feedback is welcome.

Shield can allow, challenge or deny requests.

When needed, it issues a signed Proof of Work challenge. The browser performs the computation, but the server verifies the result before protected HTML is served.

Difficulty can adapt to the request risk level.

Fuzzy search, one-click entry sharing, category reorganization. The site keeps evolving. Spotted a tool that should be listed ?
→ privacynex.org/submit
privacynex.org

Too much red. Subconsciously it reads as danger rather than trust. I introduced teal as a second accent color to balance that.

The site is now available in 4 languages. FR/EN since launch, I've added Spanish and German. Full translation : UI, entries, criteria, pages.

Fuzzy search, one-click entry sharing, category reorganization. The site keeps evolving. Spotted a tool that should be listed ?
→ privacynex.org/submit
privacynex.org

Too much red. Subconsciously it reads as danger rather than trust. I introduced teal as a second accent color to balance that.

I introduced half-points (0.5) in the scoring. When a tool makes a real effort but still has gaps, yes/no isn't precise enough. Every 0.5 comes with a tooltip explaining why, adapted per category.

@cloudflare.social